$ rpki-client -vvf rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft File: FWPM6JxbrDwQTe02KznzsvJZ8BA.mft (raw, json) Hash identifier: GNNqVUM9GByGOQbu7xjiQuY+v6V0amUqjSso5tkOirY= Subject key identifier: 14:2C:E8:93:AF:15:FB:D7:68:6D:0C:AD:A4:CF:AF:EC:34:E6:84:E5 Authority key identifier: 15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10 Certificate issuer: /CN=A9186A4B/serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010 Certificate serial: 0FE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft Manifest number: 0FD2 Signing time: Fri 22 Nov 2024 17:27:44 +0000 Manifest this update: Fri 22 Nov 2024 17:27:43 +0000 Manifest next update: Fri 29 Nov 2024 17:27:43 +0000 Files and hashes: 1: FWPM6JxbrDwQTe02KznzsvJZ8BA.crl (hash: vxV3k42B6tezBBdAfPtAsHDV9+gq6DHE0sXqLtbekvc=) 2: 0E37BE12773E11ECAD064E68C4F9AE02.roa (hash: UIDG4hidGjMCuqQe/KhvxpXKsRwNmql3jj/jGdPw3CQ=) 3: 98783026EB5F11ECB4060F86C4F9AE02.roa (hash: 5KLzaxwqFiAw/m64WegkLhB0ZcHulm0eyER2YrcckJw=) 4: 975940EAEB5F11ECB4060F86C4F9AE02.roa (hash: wPpVepx4FFYkvB6w6kZLIAZjBiXcOD593qeyNz3X4N4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4070 (0xfe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186A4B/serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010 Validity Not Before: Nov 22 17:27:43 2024 GMT Not After : Nov 29 17:27:43 2024 GMT Subject: CN=6740bf10-f235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:d9:19:44:94:fe:4b:54:20:da:fa:74:ca: 20:fa:7b:75:9f:0a:fb:74:5c:e5:28:e9:18:f6:51: 9e:36:62:1a:0b:37:19:c1:2f:25:a2:07:26:ba:27: 94:c8:68:24:7e:ee:21:c5:14:28:c6:5b:c5:50:0f: 6e:7e:4c:0f:cf:bb:ac:13:b4:dd:1d:01:e5:60:e8: f4:1c:0b:87:f1:26:41:88:a8:9d:6b:8e:79:fd:e9: ef:b6:fb:94:16:a6:28:0e:f0:86:6f:04:cb:d0:2e: e9:47:41:66:b3:2b:ce:b9:02:ce:41:79:c0:a0:83: 46:64:00:d1:80:b7:9c:cb:a5:59:0f:0b:79:44:1c: 37:22:ef:1e:d8:62:30:03:4f:77:73:2b:89:6e:4c: 03:54:d1:ce:33:d8:99:4c:5f:09:66:b2:3a:68:f5: 28:a4:e3:a9:84:67:38:ef:8b:24:b2:1f:06:32:b7: 43:05:58:32:a8:d1:5c:16:08:c2:41:bc:91:90:bf: 2a:57:61:03:56:ea:89:29:3f:6e:ae:05:97:97:ab: e1:ce:84:a0:b0:80:96:98:45:2b:af:1a:00:12:f6: 12:61:c3:71:00:28:ae:9f:cc:6a:9c:be:b5:be:e4: db:cd:a0:03:38:61:ba:14:a7:ec:74:e5:18:f8:98: 78:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2C:E8:93:AF:15:FB:D7:68:6D:0C:AD:A4:CF:AF:EC:34:E6:84:E5 X509v3 Authority Key Identifier: keyid:15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:ce:07:cd:6e:fc:5d:40:34:a0:cb:77:76:89:41:26:cd:7a: 5f:14:fb:db:06:cf:b0:01:a9:81:6f:94:66:c4:7a:3e:b2:03: 55:5a:04:de:4e:c9:0b:fe:54:4e:b6:d4:9e:6e:9d:68:d1:18: f6:4e:d6:fa:fd:2a:31:ac:2a:3b:b0:0e:54:e7:10:cd:b5:1a: 73:05:68:d4:f3:68:a6:16:5b:67:4a:9e:a8:64:2c:39:be:bc: 03:3f:23:70:69:e3:e7:26:74:2e:96:b7:d9:76:e8:a5:f8:1a: d7:7d:63:e2:84:1c:e7:44:61:25:68:d9:ea:6f:b3:3f:20:9b: 30:e2:b4:b9:0d:72:7b:77:9f:40:5a:2b:18:05:43:9b:b6:6c: fe:72:27:c6:cd:d8:69:8b:f1:4f:cc:a2:27:80:a1:22:9c:9a: 94:69:d7:f7:9b:34:e2:80:f1:0a:c4:67:b8:27:36:53:ad:9d: 7f:7c:d7:7b:43:de:00:e5:69:6b:b2:a1:c7:64:e5:14:df:41: 72:1a:07:94:fc:28:14:4d:ce:5b:6a:9b:d6:2a:fc:88:6a:e9: be:58:e9:53:ad:2a:9c:75:b1:be:5a:b3:0a:e1:08:91:a7:d6: 6b:1a:9a:c9:75:22:a3:89:d1:7a:c8:69:05:0c:fb:84:15:15: e8:99:80:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZBNEIxMTAvBgNVBAUTKDE1NjNDQ0U4OUM1QkFDM0MxMDRERUQzNjJCMzlGM0Iy RjI1OUYwMTAwHhcNMjQxMTIyMTcyNzQzWhcNMjQxMTI5MTcyNzQzWjAYMRYwFAYD VQQDEw02NzQwYmYxMC1mMjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1nZGUSU/ktUINr6dMog+nt1nwr7dFzlKOkY9lGeNmIaCzcZwS8logcmuieU yGgkfu4hxRQoxlvFUA9ufkwPz7usE7TdHQHlYOj0HAuH8SZBiKida455/envtvuU FqYoDvCGbwTL0C7pR0FmsyvOuQLOQXnAoINGZADRgLecy6VZDwt5RBw3Iu8e2GIw A093cyuJbkwDVNHOM9iZTF8JZrI6aPUopOOphGc474sksh8GMrdDBVgyqNFcFgjC QbyRkL8qV2EDVuqJKT9urgWXl6vhzoSgsICWmEUrrxoAEvYSYcNxACiun8xqnL61 vuTbzaADOGG6FKfsdOUY+Jh46wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQs6JOv FfvXaG0MraTPr+w05oTlMB8GA1UdIwQYMBaAFBVjzOicW6w8EE3tNis587LyWfAQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkE0Qi81REE1QzI3NjNF RUExMUU5OTdCNzk4MzFDNEY5QUUwMi9GV1BNNkp4YnJEd1FUZTAyS3puenN2Slo4 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXUE02SnhickR3UVRlMDJLem56c3ZKWjhCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkE0Qi81REE1QzI3NjNFRUExMUU5OTdCNzk4MzFDNEY5QUUwMi9GV1BNNkp4YnJE d1FUZTAyS3puenN2Slo4QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBozgfNbvxdQDSgy3d2iUEmzXpfFPvbBs+wAamBb5RmxHo+sgNVWgTe TskL/lROttSebp1o0Rj2Ttb6/SoxrCo7sA5U5xDNtRpzBWjU82imFltnSp6oZCw5 vrwDPyNwaePnJnQulrfZduil+BrXfWPihBznRGElaNnqb7M/IJsw4rS5DXJ7d59A WisYBUObtmz+cifGzdhpi/FPzKIngKEinJqUadf3mzTigPEKxGe4JzZTrZ1/fNd7 Q94A5WlrsqHHZOUU30FyGgeU/CgUTc5bapvWKvyIaum+WOlTrSqcdbG+WrMK4QiR p9ZrGprJdSKjidF6yGkFDPuEFRXomYAc -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org